• info
• discussion
• exploit
• solution
• references

CHM Lib Extract_chmlib Directory Traversal Vulnerability

Attackers may exploit this issue by creating a malicious CHM file that includes files with directory-traversal strings ('../') in the names.